MarineMax , which bills itself as the world's largest retailer of recreational boats and yachts, announced that a data breach caused by a ransomware attack (Rhysida) in March affects over 123,000 people.
The company initially told the SEC that no sensitive data was stored on the compromised systems. Two weeks later, it said in a new 8-K filing that the attackers had stolen personal data belonging to an unknown number of people.
See also: Rite Aid: Data breach affects 2.2 million customers
This Tuesday, it began sending data breach letters filed with the Maine and Vermont Attorney General’s Offices. In those letters, MarineMax revealed that the data breach ultimately affected 123,494 people. It added that the incident was discovered on March 10, ten days after the attackers gained access to its network.
“Based on our investigation into the incident, we have determined that an unauthorized third party gained access to our environment from March 1, 2024 to March 10, 2024,” MarineMax said. “Our investigation was recently completed and it was determined that the attacker obtained some of our data, which contained your personal information.”
See also: Hacking gang breached Disney data
MarineMax said the attackers stole names or other personally identifiable information. However, we don't know what other personal information was exposed or whether the data breach affected customers or employees (or both).
Although MarineMax did not attribute the data breach to a specific threat group, the ransomware Rhysida claimed responsibility for the attack on March 20.
Cybercriminals have released a 225GB file of data allegedly stolen from MarineMax's network. Rhysida also posted screenshots of alleged MarineMax financial documents, as well as driver's licenses and passports of customers or employees.
The consequences for victims of a data breach like MarineMax's can be numerous and severe. One of the most immediate consequences is the potential for theft identity. Criminals can use the stolen personal information to open bank accounts, take out loans, or conduct other financial transactions in the victims' names (depending on the information that was leaked).
A data breach can also lead to loss of personal and professional reputation. Victims may find themselves socially and professionally exposed as their information may be leaked publicly or used for blackmail.
See also: BMW Hong Kong faces serious data breach
Another important issue is the psychological stress and anxiety that can be caused by the breach. Feelings of insecurity and concern about how their personal data can affect the mental health of victims.
Finally, victims may need to invest time and money to reestablish their identity and protect their financial interests. This may include legal proceedings, monitoring credit records, and taking security measures to protect their personal data in the future.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Source: www.bleepingcomputer.com
